Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/TU10gdUCxQBjCnIZW9U6VNshcy8.roa
File: TU10gdUCxQBjCnIZW9U6VNshcy8.roa (raw, json)
Hash identifier: LBXY7Mu4+F2Stbby6TE9MpekUANg9/WfPHUHl5054wI=
Subject key identifier: 4D:4D:74:81:D5:02:C5:00:63:0A:72:19:5B:D5:3A:54:DB:21:73:2F
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 01994DAC35484AD0B7A529D7653E7FF0DDB0
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/TU10gdUCxQBjCnIZW9U6VNshcy8.roa
Signing time: Mon 15 Sep 2025 13:59:15 +0000
ROA not before: Mon 15 Sep 2025 13:59:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215826
IP address blocks: 178.236.252.0/24 maxlen: 24
194.59.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4d:ac:35:48:4a:d0:b7:a5:29:d7:65:3e:7f:f0:dd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Sep 15 13:59:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d4d7481d502c500630a72195bd53a54db21732f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:57:fc:16:75:ae:50:e5:cd:3f:94:40:c1:
24:8b:4d:11:0c:62:4a:b3:52:a3:2a:96:85:b4:0e:
9a:bb:bb:d2:ee:93:30:a2:21:21:1d:3a:dc:3f:d4:
a9:e6:d1:f4:ec:f6:cf:85:d0:ba:0b:ab:ac:21:15:
b2:50:68:0c:80:4b:a7:08:7b:ed:fe:bc:f5:f5:1b:
aa:88:0c:26:5b:93:60:fd:d8:b5:31:cc:4c:37:26:
3f:64:1a:67:b6:71:6e:26:45:f5:d6:df:e3:ad:39:
c9:2b:f4:25:be:19:7c:b0:36:d6:df:bd:af:66:c4:
15:2f:2d:39:95:82:47:d4:e9:8b:c7:f9:1d:fa:da:
bb:1c:e3:21:c2:20:98:c8:42:d0:bc:6c:50:46:67:
bc:1b:b4:6d:e3:bc:70:c8:82:b0:ff:54:60:c5:29:
69:1d:c9:bf:5d:75:62:a7:67:1f:9e:01:97:bd:95:
ba:a6:51:42:ee:75:e9:8c:7d:a3:38:10:6d:94:4a:
2e:9a:e1:58:96:77:70:b9:c1:51:78:ca:02:46:14:
30:5f:52:7e:24:77:43:12:53:6f:da:ef:ec:a6:6d:
83:e0:08:ad:a6:fe:d7:f4:3c:f5:79:8d:93:75:9f:
78:08:87:5a:c9:ba:dc:ff:da:7f:4a:b9:e7:ad:ca:
be:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4D:74:81:D5:02:C5:00:63:0A:72:19:5B:D5:3A:54:DB:21:73:2F
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/TU10gdUCxQBjCnIZW9U6VNshcy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.252.0/24
194.59.186.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:18:c8:bf:37:4c:be:9c:66:eb:6c:07:c4:8a:d3:9a:7d:fb:
c4:7f:04:16:c3:0d:b8:3a:7f:5d:bc:7e:a4:49:dd:9a:e7:22:
82:69:bd:34:0f:9d:1e:fc:9c:0d:4d:2e:8e:06:cc:46:8f:68:
97:c3:48:0f:a5:82:6b:57:e0:a8:c7:15:4c:71:c2:64:f2:fd:
6e:1c:09:35:ac:7c:bf:80:29:e5:3f:41:0f:ba:46:89:4e:72:
39:4a:b3:1b:9f:09:30:f2:7d:8e:2f:1b:d2:72:ce:f1:4a:ae:
24:f3:65:ff:8b:f4:b4:ea:16:26:19:b6:cb:82:63:d3:31:37:
15:20:61:4c:ab:38:cd:b4:94:2c:2b:91:66:33:74:f8:3e:68:
1c:fc:1e:d6:07:26:0f:0a:bf:03:7d:8e:33:0d:e6:3c:e4:d2:
be:b3:42:16:e3:48:40:f8:7a:8c:92:b7:a8:74:89:d7:c1:07:
81:07:b9:58:b7:c2:ec:73:53:7a:ca:64:f4:fc:fc:95:54:b9:
fa:48:78:8b:a3:db:87:a8:a4:34:c9:b3:1d:6d:91:cb:6f:97:
b8:38:2e:bc:95:91:b7:2e:ba:e5:25:43:3e:c6:6e:1e:b7:04:
ad:55:05:59:ae:f6:50:0e:7c:25:4e:26:5d:de:54:86:5c:bd:
84:10:62:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:00:58 2025 by rpki-client